IT Systems & Endpoint Operations Specialist (Intune/Entra) / Poznań, Poland
Description
beffio Studio: https://www.beffio.com Job Type: Contract / Freelance / Remote [MANDATORY] Location: Poznań, Poland Position Overview We’re looking for an experienced IT Systems & Support Specialist to join Beffio and take ownership of our internal IT operations across a fully remote team. In this role, you’ll: - Provision and manage laptops/workstations for remote employees - Own identity and device management using Microsoft Intune and Entra ID (Azure AD) - Help drive security baselines, access control, and automation through scripting - Provide practical day-to-day support while building scalable IT processes and documentation - Hybrid role based in Poznań. Beffio doesn’t have a physical office, but we do have company-owned equipment (PCs/laptops) that needs to be prepared, configured, tracked, and managed logistically when needed. This is a hands-on contract role for someone who enjoys a mix of technical administration and operational execution, and who brings structure, attention to detail, and a proactive mindset. Responsibilities Device Provisioning & Hardware Management - Prepare, configure, and ship workstations (PCs/laptops) to remote employees - Maintain hardware inventory and track device lifecycle (provisioning, replacements, returns) - Ensure device compliance, patching, and security baselines are maintained Microsoft Intune & Entra ID (Azure AD) - Manage Intune policies (configuration profiles, compliance settings, baselines) - Oversee device enrollment, application deployment, rollouts, and update strategies - Manage Entra ID roles, permission groups, user lifecycle, and security policies - Implement and maintain LAPS, PKI, Conditional Access, and MFA policies - Write and maintain PowerShell scripts to automate and improve IT workflows Software Deployment & Licensing - Manage software licenses, activations/deactivations, and subscription tracking - Ensure consistent deployment of company-approved tools and applications - Maintain documentation of owned licenses and compliance status AWS Access Management - Administer AWS IAM policies related to development access - Manage AWS CodeCommit repositories, permissions, and security rules Remote Support - Solve day-to-day technical issues for remote team members - Support VPN access, accounts, devices, and application troubleshooting - Escalate issues as needed to external vendors or partners Documentation - Create and maintain internal IT documentation - Prepare user guides, onboarding instructions, and security best practices - Document IT policies, processes, and access rules Requirements Must-have - Solid experience with Microsoft Intune and Microsoft Entra ID (Azure AD) in modern device management - Strong understanding of GPO, LAPS, PKI, Conditional Access, MFA, and endpoint security - Strong PowerShell scripting skills (automation, deployment, management tasks) - Experience supporting fully remote teams - Knowledge of AWS IAM and CodeCommit repository management - Understanding of software licensing workflows and asset management - Ability to create clear, structured technical documentation - English proficiency at B2/C1 level (written and spoken) Bonus Skills - Familiarity with security standards and c